Originally posted by reddawg
It is also someone may have got control of your site via a trojan and got into your address book
But these particular email addresses weren't stored anywhere at all on my site or my server. They would only be in the databank of the cc processor. So are you saying the processor was hit by a trojan?